max_session_duration | Patterned Designs Documentation

Type number

Default 3600

Maximum session duration in seconds for role assumption. **Range:** 3600 (1 hour) to 43200 (12 hours) **Default:** 3600 (1 hour) **When to increase:** - Long-running CI/CD pipelines - Cross-account access requiring extended sessions - Interactive console sessions for debugging **Security consideration:** Use the shortest duration that meets your needs. Shorter sessions reduce the window of exposure if credentials are compromised. **Common durations:** - 1 hour (3600): Default, suitable for most automated tasks - 4 hours (14400): Long CI/CD pipelines - 8 hours (28800): Workday console sessions - 12 hours (43200): Maximum, rarely needed

Session Duration Limits

Minimum: 3600 seconds (1 hour)
Maximum: 43200 seconds (12 hours)
Default: 3600 seconds

Best Practices

Use shorter durations for security-sensitive roles
Extend for long-running operations
Consider organizational security policies

Full Module Example

module "iam_role" {
  source  = "registry.patterneddesigns.ca/patterneddesigns/iam-role/aws"
  version = "0.1.0"

  # max_session_duration
  max_session_duration = "..."

  # Other required inputs
  name = "..."
}